0
CVE-2025-24696
- EPSS 0.08%
- Veröffentlicht 24.01.2025 18:15:42
- Zuletzt bearbeitet 15.04.2026 00:35:42
- Quelle audit@patchstack.com
- CVE-Watchlists
- Unerledigt
Attire Blocks <= 1.9.6 - Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in Shafaet Alam Attire Blocks attire-blocks allows Cross Site Request Forgery.This issue affects Attire Blocks: from n/a through <= 1.9.6.
Mögliche Gegenmaßnahme
Gutenberg Blocks and Page Layouts – Attire Blocks: Update to version 1.9.7, or a newer patched version
Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt
Gutenberg Blocks and Page Layouts – Attire Blocks
Version
*-1.9.6
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerShafaet Alam
≫
Produkt
Attire Blocks
Default Statusunaffected
Version <=
1.9.6
Version
0
Status
affected
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.08% | 0.24 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|
CWE-352 Cross-Site Request Forgery (CSRF)
The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.